VulnerabilityModified

CVE-2005-4377

Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters.

MEDIUM 4.3EPSS 1.16%

Does this matter?

Lower severity and a low EPSS score (1.16%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 1.16% probability · 65th percentile
CISA KEV: Not listed
Affected: nma/baseline cms
Source: cve@mitre.org

References

http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html
http://www.osvdb.org/21938
http://www.vupen.com/english/advisories/2005/2974
http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html
http://www.osvdb.org/21938
http://www.vupen.com/english/advisories/2005/2974

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.